Recent Breaches
Breaches
View All →
Control Module

FV-Lock: Identity-Bound Access Control

Critical infrastructure access should never depend on a single credential, a single approval, or a single person. Lock requires multiple authorised parties to approve access before any physical path is activated, ensuring oversight at every step.

Back to Control

Control Module

If a single credential can open the door, a single compromise opens the door. Multi-party authorisation ensures that no individual, whether legitimate or malicious, can access critical systems alone.

Multi-party

Every access requires approval from multiple authorised individuals

Zero

Single-credential access to critical systems

Identity-bound

Authorisation tied to verified identity, not just credentials

100%

Authorisation events logged on tamper-proof storage

The Problem

Single-factor authorisation is a single point of failure.

Single Credential Access

A single compromised password, token, or certificate grants full access to critical systems. No amount of password complexity eliminates the risk of credential theft through phishing or social engineering.

Approval Without Oversight

Traditional access management allows a single administrator to approve their own access to the most critical systems. There is no check on whether that access is appropriate or authorised.

Identity Spoofing

Attackers impersonate legitimate users through credential theft, session hijacking, and MFA bypass techniques. Without multi-party verification, spoofed identity grants full access.

The Scenario

Scenario: Preventing Unauthorised Access Through Multi-Party Control

An attacker compromises a senior network engineer's credentials through a targeted phishing campaign. They attempt to access the management interfaces for core firewalls and switches. Despite having valid, highly privileged credentials, the access request triggers a Lock authorisation workflow. A second authorised party, the security operations manager, must approve the session before the physical path to the management network is activated. The security operations manager, unaware of any scheduled maintenance, denies the request and triggers an investigation. The attacker is contained before reaching any management interface.

"The credentials they stole would have given them access to everything. But the Lock module required a second authorisation from someone else on our team. That second check stopped the attack cold."

Module Overview

Access that requires human oversight, every time.

FV-Lock ensures that critical infrastructure access always requires multiple verified individuals to approve. Combined with identity verification, time-bound sessions, and tamper-proof logging, Lock eliminates the risk of single-credential compromise leading to infrastructure access.

  • Multi-party authorisation for all critical system access
  • Identity verification beyond credentials alone
  • Configurable approval requirements by system criticality
  • Automatic session termination after approved duration
  • Emergency override with enhanced logging
  • Tamper-proof audit trail of all authorisation events
Lock

Lock, How It Works

Step 1 of 4

Lock gates physical path activation behind multi-party authorisation. Before any connection to critical infrastructure is established, the configured number of authorised parties must approve the request through verified identity. The physical path is activated only after all required approvals are received.

Featured In

TechRadar ProSecurity BuyerYahoo FinanceSecurityBriefChannel Insider

Key Capabilities

Multi-Party Authorisation

Access requires approval from a configurable number of authorised parties. No single individual can activate a path to critical infrastructure alone.

Identity Verification

Each authorising party is verified through strong identity mechanisms, not just credentials. Biometric, hardware token, and location verification are supported.

Role-Based Policies

Authorisation requirements vary by system criticality. Core infrastructure may require three-party approval while standard systems require two.

Time-Bound Sessions

Authorised sessions are automatically terminated after the approved duration. Extensions require fresh multi-party approval.

Emergency Override

Emergency access procedures provide accelerated authorisation with enhanced logging and mandatory post-access review.

Complete Audit Trail

Every request, approval, denial, and session is recorded on tamper-proof, physically disconnected storage.

Choose Your Protection

Which OSS Fits?

300GB

Low Use Vault, Deep Cold Storage

From £74.99/mo

inc. VAT · £0 due today

Offline Secure Storage for Identity-Bound Access Control, low use vault, deep cold storage.

What 300GB holds

~60,000 high-res photos
~150,000 PDF documents
~1,200 hours of voice recordings
~75 hours of HD video

Specifications

Capacity

300GB

Access

2 windows/week

Authentication

Identity-locked

Commitment

36 months

Security & Compliance

NATO-Approved FacilityDSIT-ReferencedGDPR Art. 32Cyber Essentials Plus

How to Get Started

Step 1

Access Governance Audit

Identify all critical systems where single-credential access currently exists and map the authorisation requirements for each.

Step 2

Authorisation Policy Design

Define multi-party requirements, identity verification methods, backup authoriser chains, and emergency override procedures for each system tier.

Step 3

Core Infrastructure Pilot

Deploy Lock on the most critical management interfaces, testing approval workflows, emergency procedures, and session time limits.

Step 4

Full Governance Deployment

Extend to all governed systems with automated policy enforcement, mobile approval notifications, and continuous compliance evidence.

Commercial Advantage

Win Business, Earn Trust, and Build Reputation with Butterfly

Butterfly is an operational model that helps organisations structure sensitive data to close deals faster, strengthen client relationships, and demonstrate the governance maturity that wins enterprise contracts.

Built on the VPPP framework (Vault, Policy, Permissions, Purpose), Butterfly maps your sensitive data and assigns dedicated Vaults by role, relationship, and purpose, turning data stewardship into a competitive advantage.

Deal Readiness

Governed materials ready to share with confidence

Client Trust

Demonstrate stewardship that earns loyalty

Board Confidence

Clear governance that inspires stakeholders

Enterprise Scale

Structure data governance across your organisation

Butterfly deployment model

Who Uses Butterfly?

  • Sales Teams

    Secure client proposals, pricing, and commercial intelligence

  • Service Providers

    Exchange sensitive documents with clients through governed Vaults

  • Businesses

    Protect strategic plans, IP, and competitive intelligence

  • Family Offices

    Structure data governance across principals, staff, and advisors

Questions

Frequently Asked

Ready to take the next step?

See how Firevault can protect your most sensitive data with physically disconnected storage.

    Firevault

    Firevault is Offline Secure Storage. Hardware you own, physically disconnected by default, with KYC-verified access. Ransomware-proof by design, not by patch.

    © 2026 Firevault Limited. Disconnect to Protect®